Bogdan Bendziukov Squeeze WordPress Plugin Full Path Disclosure Vulnerability

A Full Path Disclosure vulnerability has been identified in the WordPress Squeeze plugin, specifically in versions through 1.6. This vulnerability allows unauthorized users to retrieve embedded sensitive data by exposing the full path of files or directories on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system information, which could be used to identify and exploit other weaknesses in the system.

Remediation

Users of the WordPress Squeeze plugin should update to version 1.6.1 or later to address this vulnerability.